The 512-Bit Problem: A Clever Cryptographic Trick Eliminates 893 Lines of Legacy Code
When Go's cryptography library needed to replace a notorious 512-bit scalar reduction function known as 'the Christmas tree,' a surprising solution emerged. Filippo Valsorda details how a simple decomposition trick—using fiat-crypto’s limited API—enabled secure wide modular reduction while purging fragile legacy code.